Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 69 / 861

69 Managing administrative access
Creating machine accounts for security gateway access from remote computers
■
Under Restrictions on the above, you can limit specific privileges of the local administrator by
unchecking one or more check boxes.
5 On the Maintenance Privileges tab, enable the privileges you want to grant to the administrator.
When the administrator logs on, the functions for which privileges are not enabled are greyed out.
6 On the Restrict To Address tab, to restrict the addresses from which the administrator can log on,
type an IP address in the Address text box and clicking
Add .
7 Optionally, on the Description tab, type a more detailed description than you typed in the Caption
text box.
8 Click OK .
9 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
Related information
For further information related to this topic, see the following:
■
“Admin Account Properties—General tab” on page 758
■
“Admin Account Properties—Configuration Privileges tab” on page 759
■
“Admin Account Properties—Maintenance Privileges tab” on page 760
■
“Admin Account Properties—Restrict To Address tab” on page 761
Creating machine accounts for security gateway access from
remote computers
The Machine Account window lets you define computers other than administrator workstations and
authorize them to automatically retrieve or update information on the security gateway. Depending on
the privileges you assign to the machine account, the computer represented by the account can be used
to remotely view or manage log files, or to manage the security gateway’s blacklist.
Prerequisites
None.
To create a machine account for security gateway access from a remote computer
1 In the SGMI, in the left pane, under System, click Administration .
2
In the right page, on the Machine Accounts tab, click New .
3 In the Machine Account Properties dialog box, on the General tab, do the following:
Enable To enable the machine account, check Enable .
IP address Type the IP address of the machine account in dotted quad format.
Password Type the password for the machine account.
The password must be at least 10 characters long, contain both upper and lower case
letters, at least one numeric digit, and a punctuation character.
The password is encrypted and appears as a string of asterisk (*) characters.
Verify Password Type the machine account password again for confirmation.